Police and crime commissioners are failing to publish key information about salaries and contracts, the spending watchdog has warned.